8 ms·
This is already something in mainstream authentication applications you host yourself on your own domain. We use Keycloak. I don't know why anyone would install
by jacobljohnston 1y ago
This is already something in mainstream authentication applications you host yourself on your own domain. We use Keycloak. I don't know why anyone would install a JavaScript library to do this. It's not that difficult.
- danscan 1y agoFair. I assume you mean asymmetric key cryptography and not JWKs in particular? JOSE is a pretty good library if you need the latter and you’re already working in JS
- jacobljohnston 1y agoWe’re using JWKs.
- danscan 1y agoAh, and just the subtle crypto API to generate keys? Or are you not generating them on the client?
- motorest 1y ago> Fair. I assume you mean asymmetric key cryptography and not JWKs in particular? There's some degree of confusion in your comment. JWKs is a standard to represent cryptographic keys. It is an acronym for JSON Web key set. > JOSE is a pretty good library (...) JOSE is a set of standards that form a framework to securely transfer claims.
- vips7L 1y agoI wish someone would have used keycloak at my place. They decided to write it all by hand instead.